KR20110047925A - Apparatus and method for zone switching using location update in broadband wireless communication system - Google Patents

Abstract

PURPOSE: A zone switching apparatus through a location update in a broad band wireless communication system is provided to make terminals in idle mode perform zone switching. CONSTITUTION: A terminal(101) supports both a first standard and a second standard. Base stations(102,103) support both the first standard and the second standard. One or more BSC(Base Station Controller)s(104~107) interlinks the base station to a core network. An authentication server(108) takes charge of authentication and charging for the terminal. The terminal enters into an idle mode through a first standard. The terminal performs switching from the first standard zone to the second standard zone through a location updating at an idle mode.

Description

Zone switching device and method through location update in broadband wireless communication system {APPARATUS AND METHOD FOR ZONE SWITCHING USING LOCATION UPDATE IN BROADBAND WIRELESS COMMUNICATION SYSTEM}

The present invention relates to a broadband wireless communication system, and more particularly, to an apparatus and method for switching between zones supporting each standard in a broadband wireless communication system supporting a plurality of communication standards.

In the 4G (4th Generation) communication system, which is the next generation communication system, research and commercialization are being conducted to provide users with various services having a transmission speed of about 100 Mbps or more. In particular, current 4G communication systems include mobility in a broadband wireless access (BWA) communication system such as a wireless local area network (LAN) system and a wireless metropolitan area network (MAN) system. Research is being actively conducted to support high-speed services while guaranteeing quality of service (QoS) and quality of service (QoS), and the representative communication system is IEEE (Institute of Electrical and Electronics Engineers) 802.16 communication system.

Currently, the standardization of IEEE 802.16m, an advanced standard of the existing IEEE 802.16e, is in progress. From the point of view of the arrangement of network equipment, a system in which IEEE 802.16e and IEEE 802.16m are integrated will be implemented instead of the IEEE 802.16m dedicated system. Therefore, when the terminal moves from the IEEE 802.16e system to the IEEE 802.16e / 16m integrated system, the system switches the zone to the new system because the system has different characteristics from the system in which the region supports the terminal. To control.

The terminal operates in an idle mode, a sleep mode, an active mode, etc. according to the state of transmitting and receiving data. The idle mode means a state in which power consumption can be minimized when there is no traffic to be transmitted and received for a predetermined time. Currently, the IEEE 802.16m standard prescribes only a procedure for zone switching through handover in an active mode. However, when there is no transmission / reception traffic, it is inefficient for the terminal in the idle mode to transition to the active mode to obtain system information. Therefore, a scheme for acquiring and switching the system information while maintaining the idle mode should be presented.

Accordingly, an object of the present invention is to provide an apparatus and a method for acquiring system information without an idle mode terminal transitioning to an active mode in a broadband wireless communication system.

Another object of the present invention is to provide an apparatus and method for performing zone switching by an idle mode terminal through a location update procedure in a broadband wireless communication system.

According to an aspect of the present invention for achieving the above object, a broadband wireless communication system supporting a plurality of communication standards, the user equipment and the terminal that supports both the first and second standards, the terminal can be connected, And a base station supporting both the first standard and the second standard, at least one control station connecting the base station to a core network, and an authentication server responsible for authentication and billing of the terminal. The terminal enters an idle mode through the first standard and then moves from a zone for the first standard to a zone for the second standard through a location update in the idle mode. Zone switching is performed.

In a broadband wireless communication system supporting multiple standards, zone switching is instructed to the idle mode terminal, thereby enabling zone switching without transition to the active mode, and thus quick service configuration at the network end. setup) is possible.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. In the following description of the present invention, when it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted.

Hereinafter, a description will be given of a technique for a terminal to perform zone switching by a terminal in an idle mode in a broadband wireless communication system through a location update procedure.

Hereinafter, the present invention will be described using an Orthogonal Frequency Division Multiplexing (OFDM) / Orthogonal Frequency Division Multiple Access (OFDMA) scheme as an example. The same applies to other wireless communication systems.

The present invention contemplates a system that supports multiple wireless standards. For example, the plurality of wireless standards may be two standards, a legacy standard and an enhanced standard from the existing standard. As a specific example, the plurality of wireless standards may be Institute of Electrical and Electronics Engineers (IEEE) 802.16e and IEEE 802.16m. Hereinafter, for convenience of description, the present invention will be described using a system supporting two standards, such as the IEEE 802.16e and the IEEE 802.16m, the IEEE 802.16e as' 16e ', the IEEE 802.16m' It is abbreviated as 16m '. In addition, the present invention is described below using the terms defined in the IEEE 802.16 standard, taking the IEEE 802.16 system as an example. Accordingly, the terms other than terms defined separately should be interpreted as meanings defined in the IEEE 802.16 standard.

In the present invention, a unit for dividing a physical resource to support a plurality of standards is referred to as a 'zone'. One specification corresponds to one zone. For convenience of description below, the present invention refers to the zone for the 16e standard as an 'L zone' and the zone for the 16m standard as an 'm zone'.

1 illustrates a schematic configuration of a broadband wireless communication system according to an exemplary embodiment of the present invention.

Referring to FIG. 1, the system is a user equipment, and a dual mode terminal 101 supporting both 16e and 16m, base stations 102 and 103 to which the dual mode terminal 101 can connect, and the base station Control stations 104, 105, 106, and 107 that connect the devices 102 and 103 to the core network, and an authentication server (AAA: Authentication, Authorization and Accounting) 108.

In FIG. 1, 'e-' means network equipment supporting the 16e standard. That is, the e-base station 103, the anchor paging controller (e-APC) 105, and the anchor Authenticator (e-AA) 107 support the 16e standard. In addition, 'm-' means that the network equipment that supports the 16m standard. That is, m-base station 102, m-APC 104, m-AA 106 supports the 16m standard. The authentication server 108 is a device commonly used in the 16e and the 16m.

The e-base station 103 and the m-base station 102 serve as intermediate equipment for wireless communication with the dual mode terminal 101 and for connecting to the control stations 104, 105, 106, 107, which are upper nodes. Do it. The m-base station 102 supports an m zone, but may be an integrated base station serving both 16e and 16m in consideration of the transitional situation of network equipment replacement. That is, in FIG. 1, the m-base station 102 is shown as a base station that supports the 16m standard, but may only support the 16m standard in terms of radio standards, it may be a base station added a specific function to the 16e radio standard have.

The control stations 104, 105, 106, and 107 control the base stations located in the macro operator network and route data flow between the data core network and the base stations 102 and 103. For example, in the case of a worldwide interoperability for microwave access (WiMAX) system, the control station is called an access service network gateway (ASN-GW), and according to the configuration of the system, a paging controller and an authenticator ), And DPF (Data Path Function). The paging controller is a device having a function of managing a terminal in an idle mode, and provides a paging function when receiving data for the terminal. The authenticator processes authentication of the terminal and has a function of generating a security key. According to an embodiment of the present disclosure, the functions of the paging controller and the authenticator may be included in one control station or distributed in a plurality of control stations. In FIG. 1, the respective functions are distributed, but the integrated structure is not excluded. That is, an integrated structure is possible according to another embodiment of the present invention.

2A to 2C illustrate zone switching during a location update operation in a broadband wireless communication system according to the first embodiment of the present invention, and are used in an idle mode in an m zone when information on zone switching is transmitted. A signal flow including a terminal identifier is shown. 2a to 2c include a procedure for obtaining a master session key (MSK) in advance in a zone, a RNG-REQ (Ranging Request) message, and the MSK shared between the terminal and the authentication server is changed even if the authenticator is changed. No re-authentication is required. In addition, when the context information used in the L zone is moved to the m zone, the context is appropriately substituted in the network so that it can be used in the m zone.

2A to 2C, in step 202, the dual mode terminal 101 which has entered the idle mode through the 16e standard moves to the cell area of the m-base station 102, and then updates the location for location update. Send an RNG-REQ message to m-base station 102. At this time, the location update is performed according to the conditions defined in the 802.16 standard. In addition, the m-base station 102 refers to a base station that supports L zone and m zone at the same time or a base station that supports only m zone. Here, the RNG-REQ message includes a ranging purpose indicator, a media access control (MAC) address of the terminal, an APC ID of the e-APC 105 and paging information (paging group identifier, paging). Cycles, paging offsets), and the like. In this case, the ranging purpose indicator indicating the purpose of the terminal attempts ranging is set to 'idle mode location update' indicating location update. The MAC address of the terminal is used as a terminal identifier for recognizing the dual mode terminal 101 in a network. The e-APC 105 ID is an identifier of a PC managing idle terminal information in the L zone, and the m-APC 104 can discover the e-APC by transmitting the e-APC ID. In step 204, the m-base station 102 requests to update the location information of the dual mode terminal 101 by sending an R6 LU_Req (Location Update Request) message to the m-APC (104). The LU_Req message includes the MAC address of the dual mode terminal 101 obtained in step 202 and the APC ID of the e-APC 105.

In step 206, the m-APC (104) receiving the R6 LU_Req message delivers the MS MAC address that is the identifier of the dual-mode terminal 101 to the e-APC (105) by transmitting an R4 LU_Req message, Through this, the information transmission request for the dual mode terminal 101 is requested. At this time, paging information, m-Authenticator ID or Anchor Authenticator Relocation Destination and Anchor PC Relocation Destination are included in the message. The m-Authenticator is selected by the algorithm of m-APC and delivered in the form of m-Authenticator ID or Anchor Authenticator Relocation Destination. In addition, the anchor PC relocation destination means an identifier for the final anchor PC.

In step 208, the e-APC 105 transmits a Context_Req (Context Request) message including an Anchor PC Relocation Destination and an Anchor Authenticator Relocation Destination to the e-AA 107 for the dual mode terminal 101. Request security related information.

In step 210, the e-AA 107 transmits a MS security history to the m-AA 106 by sending a Relocation_Req message, and notifies the authenticator change. The format of security related information is replaced by the m-AA 106 to be valid in the m zone. According to the security policy, the MSK generated between the dual mode terminal 101 and the authentication server 108 can not be transferred directly from the e-AA 107 to the m-AA 106, as follows. Delivered via authentication server 108 indirectly.

In step 212, the m-AA 106 transmits a connection request message including a user-name of the dual mode terminal 101 to the authentication server 108, and in step 214, the authentication. The server 108 sends a connection accept message containing the MSK to the m-AA 106. Through this, the m-AA 106 communicates with the authentication server 108 to obtain the MSK for the terminal.

In step 216, the m-AA 106 notifies the e-AA 107 whether to approve the relocation request by transmitting a Relocation Response (Rlocation) message.

In step 218, the e-AA 107 recognizing that the repositioning process is successfully completed, sends an Context_Rpt (Context Report) message to the e-APC 105 to send the AK to the dual mode terminal 101. Pass Context

In step 220, the e-APC 105 transmits the MAC address and Authorization Key (AK) context information of the dual mode terminal 101 to the m-APC 104 through a LU_Rsp (Location Update Response) message. . The MAC address of the dual mode terminal 101 is used as an identifier for the m-APC 104 to obtain a suitable MSK from the m-AA 106. In addition, the AK Context is used for validity checking of the RNG-REQ message transmitted by the UE in step 202.

In step 222, the m-APC 104 allocates a De-registration ID and stores a mapping between the MS MAC address and the assigned De-registration ID. Then, the De-registration ID is transmitted to the m-base station 102 through the LU_Rsp message. The de-registration ID is used as an identifier of the terminal when the terminal, which is in an idle state, is updated to the m zone in step 226. In step 224, the m-base station 102 delivers the RNG-RSP message to the dual mode terminal 101. The RNG-RSP message includes an m-APC ID and a Zone Switch TLV, and the corresponding Zone Switch TLV includes a De-registration ID and Nonce_BS. In this step, the base station proposes that the dual mode terminal 101 switches from the L zone to the m zone, and transmits the terminal identifier used in the idle mode of the m zone in the Zone Switching TLV. The Nonce_BS is a random number generated at the base station and used by the dual mode terminal to generate PMK, AK, and MSID *. The Location Update Response in the RNG-RSP is expressed as "Success of Location update" or "Zone switching".

In step 226, the dual mode terminal 101 generates a PMK (Pairwise Master Key), AK, MSID *, Cipher-based Message Authentication Code (CMAC) key, etc. using MSK, Nonce_BS, and newly generated Nonce_MS. . The PMK, the AK, and the MSID * are determined as in Equation 1 below. Since the calculation method in Equation 1 is disclosed in an IEEE 802.16 document, description thereof is omitted.

PMK = Dot16KDF (MSK, NONCE_MS | NONCE_BS | "PMK", 160)

AK = Dot16KDF (PMK, MSID * | BSID | CMAC_Key_COUNT | "AK", 160)

MSID * = function (MS MAC Address, Nonce_BS, BSID)

The dual mode terminal 101 transmits the De-registration ID, the Nonce_BS and the Nonce_MS, the MSID *, the CMAC Tuple and the CMAC_KEY_COUNT, and paging information to the m-base station 102 through an AAI_RNG-REQ message. do. If the m-APC 104 finds the MS MAC Address of the dual mode terminal 101 using the De-registration ID, and transmits the MS MAC Address to the m-AA 106, If the m-AA 106 can generate the MSID *, the MSID * delivery may be omitted in step 226. In addition, the dual mode terminal 101 provides the identifier of the m-APC 104 so that the m-base station 102 can access the m-APC 104 and the e-APC 105. Forward to base station 102. Nonce_BS, Nonce_MS and MSID * are used for the purpose of generating PMK and AK in m-AA 106.

In step 228, the m-base station 102 receiving the RNG-REQ message transmits an LU_Req message to the m-APC 104. The LU_Req message includes Nonce_BS, Nonce_MS, MSID *, CMAC_KEY_COUNT, De-registration ID and paging information.

In step 230, the m-APC 104 finds the mapped MS MAC address in the mapping table stored based on the De-registration ID received in step 230. In addition, the AK context is requested to the dual mode terminal 101 by transmitting it to the m-AA 106 by including it in a Context_Req message. Since the m-AA 106 has an MSK for the dual mode terminal 101, the m-AA 106 generates an AK with the MSID *, Nonce_BS, Nonce_MS, and CMAC keys received from the m-APC 104.

In step 232, the m-AA 106 finds an appropriate MSK for the terminal based on the received MS MAC address. Then, PMK, AK, etc. are generated using the information obtained in step 230 and the found MSK. Then, the AK Context is delivered to the m-APC 104 via a Context_Rpt message.

In step 234, the m-APC 104 having obtained the AK-related information allocates a De-registration ID to be actually used by the UE in the idle mode in the m zone, and transmits an LU_Rsp message to the m-base station 102. At this time, the De-registration ID and AK context are included.

In step 236, the m-base station 102 delivers the AAI_RNG-RSP including the De-registration ID to the dual mode terminal 101. At this time, the m-base station 102 generates a TEK based on the received AK to encrypt the AAI_RNG-RSP. At this time, the Location Update Response is set to Success and is delivered to the terminal.

In step 238, the m-base station 102 transmits an AAI_RNG-RSP message, and then sends an LU_Cnf message to the m-APC 104 indicating that the location update was successful. In step 240, the m-APC 106 transmits a Location Update Confirm (LU_Cnf) message to the e-APC 105 to update the location of the dual mode terminal 101 in the new system to the e-APC 105. After performing the request, the dual mode terminal 101 deletes the stored information.

3A to 3C illustrate signal flows for indicating zone switching in a broadband wireless communication system according to a second embodiment of the present invention. The procedure shown in FIGS. 3A-3C differs in the time of acquiring MSK compared to the procedure shown in FIGS. 2A-2C.

3A to 3C, in step 302, the dual mode terminal 101 that has entered the idle mode through the 16e standard moves to the cell area of the m-base station 102, and then updates the location for location update. Send an RNG-REQ message to m-base station 102. At this time, the location update is performed according to the conditions defined in the 802.16 standard. In addition, the m-base station 102 refers to a base station that supports L zone and m zone at the same time or a base station that supports only m zone. Here, the RNG-REQ message includes a ranging purpose indicator, a media access control (MAC) address of the terminal, an APC ID of the e-APC 105 and paging information (paging group identifier, paging). Cycles, paging offsets), and the like. In this case, the ranging purpose indicator indicating the purpose of the terminal attempts ranging is set to 'idle mode location update' indicating location update. The MAC address of the terminal is used as a terminal identifier for recognizing the dual mode terminal 101 in a network. The e-APC 105 ID is an identifier of a PC managing idle terminal information in the L zone, and the m-APC 104 can discover the e-APC by transmitting the e-APC ID.

In step 304, the m-base station 102 requests the m-APC 104 to update the location information of the dual mode terminal 101 by sending an R6 LU_Req (Location Update Request) message. The LU_Req message includes the MAC address of the dual mode terminal 101 obtained in step 202 and the APC ID of the e-APC 105.

In step 306, the m-APC 104 receiving the R6 LU_Req message transmits an MS MAC address, which is an identifier of the dual mode terminal 101, to the e-APC 105 by transmitting an R4 LU_Req message. Through this, the information transmission request for the dual mode terminal 101 is requested. At this time, paging information, m-Authenticator ID or Anchor Authenticator Relocation Destination and Anchor PC Relocation are included in the message. The m-Authenticator is selected by the algorithm of m-APC and delivered in the form of m-Authenticator ID or Anchor Authenticator Relocation Destination. In addition, the anchor PC relocation destination means an identifier for the final anchor PC.

In step 308, the e-APC 105 transmits a Context_Req (Context Request) message including an Anchor PC Relocation Destination and an Anchor Authenticator Relocation Destination to the e-AA 107 for the dual mode terminal 101. Request security related information.

In step 310, the e-AA 107 transmits a MS security history to the m-AA 106 by sending a Relocation_Req message, and notifies the authenticator change. The format of security related information is replaced by the m-AA 106 to be valid in the m zone. According to the security policy, the MSK generated between the dual mode terminal 101 and the authentication server 108 can not be transferred directly from the e-AA 107 to the m-AA 106, as follows. Delivered via authentication server 108 indirectly.

In step 312, the m-AA 106 notifies the e-AA 107 whether to approve the relocation request by transmitting a Relocation Response (Relocation Response) message.

In step 314, the e-AA 107 recognizing that the relocation process is successfully completed transmits a Context_Rpt (Context Report) message to the e-APC 105 to send the AK to the dual mode terminal 101. Pass Context

In step 316, the e-APC 105 transmits the MAC address and Authorization Key (AK) context information of the dual mode terminal 101 to the m-APC 104 through a LU_Rsp (Location Update Response) message. . The MAC address of the dual mode terminal 101 is used as an identifier for the m-APC 104 to obtain a suitable MSK from the m-AA 106. In addition, the AK Context is used to examine the validity of the RNG-REQ message transmitted by the UE in step 302.

In step 318, the m-APC 104 allocates a De-registration ID and stores a mapping between the MS MAC address and the assigned De-registration ID. Then, the De-registration ID is transmitted to the m-base station 102 through the LU_Rsp message. The de-registration ID is used as an identifier of the terminal when the terminal, which is in an idle state, is updated to the m zone in step 322. In step 320, the m-base station 102 delivers the RNG-RSP message to the dual mode terminal 101. The RNG-RSP message includes the m-APC ID and the Zone Switch TLV, and the Zone Switch TLV includes the De-registration ID and the Nonce_BS. In this step, the base station proposes that the dual mode terminal 101 switches from the L zone to the m zone, and in this case, the terminal identifier used in the idle mode of the m zone is included in the Zone Switching TLV and transmitted. As a generated random number, a dual mode terminal is used to generate PMK, AK and MSID *. The Location Update Response in the RNG-RSP is expressed as "Success of Location update" or "Zone switching".

In step 322, the dual mode terminal 101 generates a PMK (Pairwise Master Key), AK, MSID *, Cipher-based Message Authentication Code (CMAC) key, etc. using MSK, Nonce_BS, and newly generated Nonce_MS. . The PMK, the AK, and the MSID * are determined as in Equation 2, and the calculation method in Equation 2 is disclosed in an IEEE 802.16 document, and thus description thereof is omitted.

PMK = Dot16KDF (MSK, NONCE_MS | NONCE_BS | "PMK", 160)

AK = Dot16KDF (PMK, MSID * | BSID | CMAC_Key_COUNT | "AK", 160)

MSID * = function (MS MAC Address, Nonce_BS, BSID)

The dual mode terminal 101 transmits the De-registration ID, the Nonce_BS and the Nonce_MS, the MSID *, the CMAC Tuple and the CMAC_KEY_COUNT, and paging information to the m-base station 102 through an AAI_RNG-REQ message. do. If the m-APC 104 finds the MS MAC Address of the dual mode terminal 101 using the De-registration ID, and transmits the MS MAC Address to the m-AA 106, If the m-AA 106 can generate the MSID *, the MSID * delivery may be omitted in step 322. In addition, the dual mode terminal 101 provides the identifier of the m-APC 104 so that the m-base station 102 can access the m-APC 104 and the e-APC 105. Forward to base station 102. Nonce_BS, Nonce_MS and MSID * are used for the purpose of generating PMK and AK in m-AA 106.

In step 324, the m-base station 102 receiving the RNG-REQ message transmits an LU_Req message to the m-APC 104. The LU_Req message includes Nonce_BS, Nonce_MS, MSID *, CMAC_KEY_COUNT, De-registration ID and paging information.

In step 326, the m-APC 104 finds the mapped MS MAC address in the mapping table stored based on the De-registration ID received in step 322. In addition, the AK context is requested to the dual mode terminal 101 by transmitting it to the m-AA 106 by including it in a Context_Req message. Since the m-AA 106 has an MSK for the dual mode terminal 101, the m-AA 106 generates an AK with the MSID *, Nonce_BS, Nonce_MS, and CMAC keys received from the m-APC 104.

In step 328, the m-AA 106 transmits a connection request message including a user-name of the dual mode terminal 101 to the authentication server 108, and in step 330, the authentication. The server 108 sends a connection accept message containing the MSK to the m-AA 106. Through this, the m-AA 106 communicates with the authentication server 108 to obtain the MSK for the terminal.

In step 332, the m-AA 106 generates PMK, AK, etc. using the information obtained in step 326 and the found MSK. Then, the AK Context is delivered to the m-APC 104 via a Context_Rpt message.

In step 334, the m-APC 104 obtained the AK-related information allocates a De-registration ID to be actually used by the terminal in the idle mode in the m zone, and delivers the LU_Rsp message to the m-base station (102). At this time, the De-registration ID and AK context are included.

In step 336, the m-base station 102 delivers AAI_RNG-RSP including the De-registration ID to the dual mode terminal 101. At this time, the m-base station 102 generates a TEK based on the received AK to encrypt the AAI_RNG-RSP. At this time, the Location Update Response is set to Success and is delivered to the terminal.

In step 338, the m-base station 102 transmits an AAI_RNG-RSP message, and then sends an LU_Cnf message to the m-APC 104 indicating that the location update was successful. In step 340, the m-APC 106 transmits a Location Update Confirm (LU_Cnf) message to the e-APC 105, so that the dual mode terminal 101 is located in the new system to the e-APC 105. Since the update is performed, it is requested to delete the stored dual mode terminal 101 information.

2A to 2C and 3A to 3C, the AAI_RNG-REQ message includes at least one of the parameters shown in Table 1 below.

designation value Usage MS_Random AMS generates a random number MS_Random which is used for ABS to distinguish AMSs when more than one AMS send AAI_RNG-REQ message at the same time. It shall be included when the AMS is attempting network entry
without its STID which the ABS assigns MAC version Version number of IEEE 802.16 supported by the AMS Ranging purpose
Indication The presence of this item in the message indicates the following AMS action:
If Bit # 0 is set to 1, it indicates that the AMS is currently attempting HO reentry, or, in combination with a Paging Controller ID, indicates that the MS is attempting network reentry from idle mode to the BS. In this case, Bit # 1 shall be 0.
If Bit # 1 is set to 1, it indicates that the AMS is initiating the idle mode location update process. In this case, Bit # 0 shall be 0.
If Bit # 2 is set to 1, ranging request for emergency call setup. When this bit is set to 1, it indicates AMS action of Emergency Call process.
If bit # 5 is set to 1, it indicates that the AMS is initiating location update for transmission to DCR mode from idle mode.
If bit # 6 is set to 1 in combination with ID of the network entity that assigns / retains the context, it indicates that the AMS is currently attempting re-entry from DCR mode.
<<<Editor's note: reserved bits below are invalid >>>
Bit # 3-7: reserved. It shall be included when the AMS is attempting to perform reentry, HO or location update Serving BSID The BSID of the serving ABS to which the AMS is currently connected (has completed the registration cycle and is in normal operation). The serving BSID shall not be included if the aging timer is timed-out (serving BSID AGINGTIMER). Inclusion of serving BSID in the AAI_RNG-REQ message signals to the target ABS that the AMS is currently connected to the network through the serving ABS and is in the process of HO network reentry. It shall be included when the AMS is attempting to perform HO reentry Previous STID The STID which the AMS uses in the previous serving ABS. It shall be included when the AMS is attempting to perform HO reentry Paging
Controller ID The Paging Controller ID which the AMS currently maintains in idle mode. It shall be included when the AMS is attempting to perform reentry or location update Deregistration
Identifier (DID) The ID which the AMS is assigned for idle mode and currently maintains.
PGID The identification of the paging group that the AMS is previously belonging to.
Paging Cycle PAGING_CYCLE applied to the AMS
Paging Offset PAGING_OFFSET applied to the AMS
Paging Cycle
Change PAGING_CYCLE requested by the AMS It shall be included when the AMS in Idle Mode is attempting to change Paging Cycle during Location Update Power down
Indicator Indicates the AMS is currently attempting to perform location update due to power down. It shall be included when the AMS is attempting to perform location update due to power down Power down
Indicator The AMS's current value of the CMAC_KEY_COUNT, which is used to generate the security keys in the target ABS. It shall be included during re-entry, secure Location Update or HO CMAC Tuple It shall be included during re-entry, secure Location Update or HO It shall be included when the AMS is attempting to perform Network Re-Entry from idle mode, Secure Location Update, or HO, if the AMS has a CMAC tuple necessary to expedite security authentication. Nonnce_bs A random number generated by BS of 64 bits. It shall be included when the AMS is attempting to perform the zone switching from LZone to MZone.

Nonnce_ms A random number generated by MS of 64 bits. AMSID * a permutation of MSID (ie AMS MAC
address) sent by MS to BS

As shown in Table 1, the AAI_RNG-REQ message according to an embodiment of the present invention may include Nonce_BS, Nonce_MS, and MSID *. The Nonce_BS is a random number generated at the base station, and the Nonce_MS is a random number generated at the terminal. The MSID * is a parameter used to generate PMK, AK, etc. at the network end, and is determined as in Equation 3 below.

MSID * = function (MS MAC Address, Nonce_BS, BSID)

If m-APC finds MS MAC Address from mapping table that it has stored based on De-registration ID received from MS and delivers it to m-AA, m-AA can generate MSID * , MSID * may not be included in the AAI_RNG-REQ message.

In the procedures shown in FIGS. 2A-2C and 3A-3C, the RNG-RSP message includes at least one of the parameters shown in Table 2 below.

designation type Length value PHY scope Timing adjust One 4 Tx timing offset adjustment (signed 32-
bit). The amount of time required to adjust SS transmission so the bursts will arrive at the expected time instance at the BS. Units are PHY-specific (see 10.3). The SS shall advance its burst transmission time if the value is negative and delay its burst transmission if the value is positive. All Power level
Adjust 3 One Tx Power offset adjustment (signed 8-bit, 0.25 dB units) Specifies the relative change in transmission power level that the SS is to make in order that transmissions arrive at the BS at the desired power. When subchannelization is employed, the subscriber shall interpret the power offset adjustment as a required change to the transmitted power density. All Offset Frequency
Adjust 3 4 Tx frequency offset adjustment (signed
32-bit, hertz units) Specifies the relative change in transmission frequency that the SS is to make in order to better match the BS. If the value is less than half of the channel bandwidth, this is fine-frequency adjustment within a channel, otherwise, this is reassignment to a different channel. The SS shall increase its Tx frequency if the value is positive and decrease its Tx frequency if the value is negative. All Ranging Status 4 One Used to indicate whether UL messages are received within acceptable limits by BS.
1 = continue, 2 = abort, 3 = success All Downlink
frequency
override 5 4 Center frequency, in kHz, of new DL channel where the SS should redo ranging.If this TLV is used, the Ranging Status value shall be set to 2. Shall be used for licensed bands only. OFDM
OFDMA Uplink channel
ID
override 6 One License-exempt bands: The Channel Nr (see 8.5.1) where the SS should redo initial ranging. All Downlink
Operational
Burst profile 7 2 This parameter is sent in response to the RNGREQ Requested Downlink Burst Profile parameter.
Bit 0-7: Specifies the least robust DIUC that may be used by the BS for transmissions to the SS.
Bit 8-15: Configuration Change Count value of DCD defining the burst profile associated with DIUC. All SS MAC Address 8 6 SS MAC Address in MAC-48 format. All Basic CID 9 2 Basic CID assigned by BS at initial access. All Primary
Management
CID 10 2 Primary Management CID assigned by BS at initial access. All AAS broadcast
permission 11 One 0 = SS may issue contention-based BR permission.
1 = SS shall not issue contention-based
BR. OFDM
OFDMA Frame number 12 3 Frame number where the associated RNG-REQ message was detected by the BS. Usage is mutually exclusive with SS MAC Address (Type 8).
The opportunity within the frame is assumed to be 1 (the first) if the Initial Ranging Opportunity field is not supplied. OFDM Initial ranging
opportunity
number 13 One Initial ranging opportunity (1-255) in
which the associated RNG-REQ message was detected by the BS. Usage is mutually exclusive with SS MAC Address (Type 8). OFDM Service level
Prediction 17 One Indicates the level of service the MS can expect from this BS:
0 = No service possible for this MS.
1 = Some service is available for one or several service flows authorized for the MS.
2 = For each authorized service flow, a
MAC connection can be established with QoS specified by the AuthorizedQoSParamSet.
3 = No service level prediction available. All Resource Retain
Flag 20 One Indicates whether the former serving BS
retains the connection information of the MS:
0 = Connection information for the MS is deleted.
1 = Connection information for the MS is retained. All HO Process
Optimization 21 2 For each Bit location, a value of '0' indicates the associated re-entry management messages shall be required, a value of '1' indicates the reentry management message should be omitted.
Bit 0: Omit SBC-REQ management messages
during current re-entry processing (Bit 1, Bit 2) = (0,0): Perform re-authentication and SA-TEK 3-way handshake. BS shall not include SA-TEK-Update TLV in the SATEK-Response message. In addition, the RNG-RSP message does not include SATEK-Update TLV.
(Bit 1, Bit 2) = (0,1): Reserved.
(Bit 1, Bit 2) = (1,0): SA-TEK-Update TLV is included in the RNG-RSP message. In this case, SA-TEK 3-way handshake is avoided. (Bit 1, Bit 2) = (1, 1): Re-authentication and SATEK 3-way handshake is not performed. The RNG-RSP message does not include SATEK-Update TLV. All the TEKs received from the serving BS are reused.
Bit 3: Omit Network Address Acquisition
management messages during current reentry processing
Bit 4: Omit Time of Day Acquisition management messages during current reentry processing
Bit 5: Omit TFTP management messages
during current re-entry processing
Bit 6: If Bit 6 = 1, Full service and
operational state transfer or sharing between Serving BS and Target BS (All static and dynamic context, eg, ARQ windows, timers counters state machines)
Bit 7: Omit REG-REQ management message
during current re-entry processing
Bit 8: If Bit 8 = 0, BS shall send an
unsolicited SBC-RSP management message
Bit 9: If Bit 9 = 1, post-HO re-entry MS DL data pending at target BS
Bit 10: If Bit 10 = 0, BS shall send an
unsolicited REG-RSP management message
Bit 11: (Target) BS supports virtual SDU SN. If
Bit 11 = 1 and MS supports SDU SN, it shall issue SN_REPORT upon completion of HO to this BS.
Bit 12: If Bit 12 = 1, MS shall send a
notification of MS's successful re-entry registration.
Bit 13: If this bit is set to 1, MS shall trigger a higher layer protocol required to refresh its traffic IP address (eg, DHCP Discover [IETF RFC 2131] or Mobile IPv4 re-registration
[IETF RFC 3344].
Bits 14-15: Reserved All HO ID 22 One Identifier assigned by the Target BS for use in initial ranging during MS HO to it (see 6.3.20.5). All Location update
Response 23 One 0x00 = Success of Location Update
0x01 = Failure of Location Update
0x02 = Zone Switch
0x03 = Success of location update and DL
traffic pending
0x04 ~ 0xFF: Reserved All Power_Saving_Class_Parameters 27 variable Compound TLV to specify power saving class definition and / or operation. All Unified TLV
encoding for Power Saving
Class Parameters 28 variable BS may use this TLV encoding instead of
the Power_Saving_Class_Parameters TLV encoding to specify a Power Saving Class (see Table 580). SBC-RSP
encodings 29 variable SBC-RSP TLV items for HO optimization. All REG-RSP
encodings 30 variable REG-RSP TLV items for HO optimization. All Downlink
Operational
Burst profile
for OFDMA 33 2 Is sent in response to the RNG-REQ
Requested Downlink Burst Profile parameter.
Bit 0-3: Specifies the least robust DIUC that may be used by the BS for transmissions to the MS.
Bit 4-7: Specifies Repetition Coding
Indication:
0b0000 -No repetition coding
0b0001 -Repetition coding of 2
0b0010-Repetition coding of 4
0b0011 -Repetition coding of 6
The repetition coding indication shall be 0b0000 if the DIUC refers to modulations higher than QPSK.
Bit 8-15: Configuration Change Count value of DCD defining the burst profile
associated with DIUC. OFDMA Rendezvous time 36 One This is offset, measured in units of frame duration, when the BS is expected to provide non-contention-based ranging opportunity for the MS. The offset is calculated from the frame where RNG-RSP message is transmitted. The BS is expected to provide non-contention-based Ranging opportunity at the frame specified by Rendezvous time parameter. OFDMA CDMA code 37 One A unique code assigned to the MS, to be
used for dedicated ranging. Code is from the initial ranging codeset. OFDMA Transmission
opportunity
offset 38 One A unique transmission opportunity assigned to the MS, to be used for dedicated ranging in units of symbol duration. OFDMA Preamble Index
Override 39 Length
is
defined
as: (Num
of
Preamble
Index) ×
One Preamble Indices of new target BS (s) where the MS should redo ranging. If this TLV is used, the Ranging Status value shall be set to 2. This TLV shall be used for licensed bands only. All Ranging abort
Timer 40 One 0-255: In units of seconds. All QoS Parameters [145 /
146] variable Compound TLV incorporating one or more
11.13 QoS Parameter Set definition encodings. All SFID [145 /
146] .1 4 - All Global Service
Class name [145 /
146] .3
5 variable Compound TLV incorporating one or more
Global Service Class Name encodings (11.13.23). All Zone switch xx variable

As shown in Table 2, the RNG-RSP message according to an embodiment of the present invention may include a 'Zone Switch' for a Location Update Response, and includes a 'Zone Switch TLV' to support zone switching. can do.

In the procedures illustrated in FIGS. 2A to 2C and 3A to 3C, the Zone Switch TLV includes at least one of the following parameters as shown in Table 3 below.

designation Explanation Nonnce_bs It shall be included when the AMS is attempting to perform the zone switching from LZone to MZone. De-registration ID

As shown in Table 3, the zone switch TLV according to an embodiment of the present invention may include a Nonce_BS and a De-registration ID. The Nonce_BS is used for generating an authentication key at the terminal and the network, and the De-registration ID is used as an identifier of the idle terminal when the terminal later attempts to update the location to the m zone. For example, the Nonce_BS may be defined as shown in Table 4 below, and the De-registration may be defined as shown in Table 5 below.

type Length value xx 8 64 bit

type Length value xx 2 0-1023

In the present invention, examples of parameters included in some messages have been described using Tables 1 to 5. However, the names and definitions of the parameters shown in Tables 1 to 5 are one embodiment, and each parameter may be configured in other forms within the scope of the present invention.

4 is a block diagram of a terminal in a broadband wireless communication system according to an exemplary embodiment of the present invention.

Referring to FIG. 4, the terminal includes an encoder 402, a symbol modulator 404, a subcarrier mapper 406, an OFDM modulator 408, a radio frequency (RF) transmitter 410, an RF receiver 412, An OFDM demodulator 414, a subcarrier demapper 416, a symbol demodulator 418, a decoder 420, and a controller 422 are configured.

The encoder 402 channel codes the transmission bit stream. The symbol modulator 404 converts the channel coded bit string into complex symbols. The subcarrier mapper 406 maps the complex symbols to the frequency domain. The OFDM modulator 408 converts the complex symbols mapped to the frequency domain into a time domain signal through an inverse fast fourier transform (IFFT) operation, and constructs an OFDM symbol by inserting a cyclic prefix (CP). The RF transmitter 410 up-converts the baseband signal into an RF band signal and transmits it through an antenna.

The RF receiver 412 down converts an RF band signal received through an antenna into a baseband signal. The OFDM demodulator 414 divides the signal provided from the RF receiver 412 in OFDM symbol units and restores complex symbols mapped to the frequency domain through a fast fourier transform (FFT) operation. The subcarrier demapper 416 classifies complex symbols mapped to a frequency domain into processing units. The symbol demodulator 418 converts the complex symbols into a bit string by demodulating the complex symbols. The decoder 420 restores an information bit string by channel decoding the bit string.

The controller 422 controls the overall function of the terminal. For example, the controller 422 determines an operation mode of the terminal and controls to operate in the corresponding mode. That is, when there is transmission / reception traffic, the controller 422 controls to operate in an active mode, and when transmission / reception traffic does not exist for a predetermined time or more, the controller 422 controls to operate in an idle mode. When operating in the idle mode, the controller 422 performs location update based on a location update condition defined in the IEEE 802.16 standard. At this time, the controller 422 controls to perform zone switching through the location update. The function of the controller 422 for the zone switching is as follows.

After entering the idle mode through the 16e standard and moving to the cell area of the mixed base station supporting both the 16m standard and the 16e standard, the controller 422 is the encoder 402, the symbol modulator 404, the A RNG-REQ (Ranging Request) message for location update is transmitted through the subcarrier mapper 406, the OFDM modulator 408, and the RF transmitter 410. Here, the RNG-REQ message includes a ranging purpose indicator, a media access control (MAC) address of the terminal, an APC ID of a paging controller according to 16e standard, and the like. In this case, the ranging purpose indicator indicating the purpose of the terminal attempts ranging is set to 'idle mode location update' indicating location update.

Then, when the RNG-RSP message is received from the mixed base station, the controller 422 obtains a De-registration ID, Nonce_BS, etc. from the RNG-RSP message through an m-APC ID and a Zone Switch TLV. Here, the De-registration ID is used as an identifier for distinguishing the terminal of the idle mode in the m zone, the Zone Switch means an indicator to change the zone because the terminal service system has been changed, the Nonce_BS is generated in the base station Mean a random number. Accordingly, the controller 422 recognizes that zone switching should be performed.

Subsequently, the controller 422 generates the PMK, the AK, the MSID *, the CMAC key, etc. using the MSK and the newly generated Nonce_MS, and the like. Then, the De-registration ID, the Nonce_BS, the Nonce_MS, the MSID *, the The AAI_RNG-REQ message including the CMAC Tuple and the CMAC_KEY_COUNT is transmitted to the mixed base station. At this time, the APC ID of the paging manager according to the 16m standard is also transmitted so that the mixed base station can access the paging manager according to the 16m standard and the paging manager according to the 16e standard. Thereafter, when the AAI_RNG-RSP message including the index indicating the successful location update and the De-registration ID is received, the controller 422 recognizes that the location update is completed.

5 is a block diagram of a base station in a broadband wireless communication system according to an exemplary embodiment of the present invention.

Referring to FIG. 5, the base station includes an RF receiver 502, an OFDM demodulator 504, a subcarrier demapper 506, a symbol demodulator 508, a decoder 510, an encoder 512, and a symbol modulator ( 514, a subcarrier mapper 516, an OFDM modulator 518, an RF transmitter 520, a backhaul communicator 522, and a controller 524.

The RF receiver 502 down-converts an RF band signal received through an antenna to a baseband signal. The OFDM demodulator 504 divides the signal provided from the RF receiver 502 in OFDM symbol units and restores complex symbols mapped to the frequency domain through an FFT operation. The subcarrier demapper 506 classifies complex symbols mapped to a frequency domain into processing units. The symbol demodulator 508 converts the complex symbols into bit strings by demodulating the complex symbols. The decoder 510 restores an information bit string by channel decoding the bit string.

The encoder 512 channel encodes the transmission bit stream. The symbol modulator 514 converts the channel coded bit strings into complex symbols. The subcarrier mapper 516 maps the complex symbols to the frequency domain. The OFDM modulator 518 configures an OFDM symbol by converting complex symbols mapped to the frequency domain into a time domain signal through an IFFT operation, and inserting a CP. The RF transmitter 520 up-converts the baseband signal into an RF band signal and transmits it through an antenna. The backhaul communicator 522 provides an interface for the base station to communicate with other nodes in the network.

The controller 524 controls the overall function of the base station. For example, the controller 524 manages an operation mode of connected terminals and processes a location update procedure for an idle mode terminal. In particular, the controller 524 controls the idle mode terminal to perform zone switching through the location update. The function of the controller 524 for the zone switching is as follows.

After entering the idle mode through the 16e standard, if the RNG-REQ message for location update is received from the terminal moved to the cell area of the base station supporting both the 16m standard and the 16e standard, the controller 524 is the backhaul By transmitting the R6 LU_Req message through the communication unit 522, the paging controller according to the 16m standard is requested to update the location information of the terminal. In this case, the LU_Req message includes the MAC address of the terminal obtained from the RNG-REQ message and the APC ID of the paging controller according to the 16e standard.

Subsequently, when a LU_Rsp message including a De-registration ID used as an identifier of a terminal of an idle mode in an m zone and a MAC address of the terminal is received from a paging controller according to the 16m standard, the controller 524 determines De- A RNG-RSP message including a registration ID, a zone switch, and a nonce_BS is transmitted to the terminal. At this time, the controller 524 stores a mapping relationship between the MAC address and the De-registration ID of the terminal.

Then, when the AAI_RNG-REQ message including the De-registration ID, the Nonce_BS, the Nonce_MS, the MSID *, and the CMAC key is received from the terminal, the controller 524 is a Nonce_BS as a paging controller according to the 16e standard. Sends a LU_Req message including the Nonce_MS, MSID *, CMAC_KEY_COUNT, De-registration ID, and paging information.

Then, when a LU_Rsp message including a De-registration ID actually used by the terminal is received from a paging controller according to the 16m standard, the controller 524 includes an RNG-RSP message including an index indicating that the location update has been successfully performed. And a LU_Cnf message indicating that the location information update was successful to the paging controller according to the 16m standard.

6 is a block diagram of a paging controller in a broadband wireless communication system according to an exemplary embodiment of the present invention.

Referring to FIG. 6, the paging controller includes a communicator 602 and a controller 604.

The communicator 602 provides an interface for the paging controller to communicate with other nodes in the network. The controller 604 controls the overall functionality of the paging controller. That is, the paging manager 606 in the controller 604 manages paging information of idle mode terminals. In particular, the controller 604 controls to perform zone switching through the location update of the idle mode terminal. The function of the controller 604 for the zone switching is as follows.

When the R6 LU_Req message including the MAC address of the terminal and the APC ID of the paging controller according to the 16e standard is received from the mixed base station, the controller 604 transmits the R4 LU_Req message to the paging controller according to the 16e standard. Delivers the MAC address, and through this, requests for information delivery to the terminal. At this time, an AARD (Anchor Authenticator Relocation Destination), which is information of an authenticator according to the 16m standard, is delivered together so that the authenticator according to the 16e standard can access the authenticator according to the 16m standard.

Then, when the LU_Rsp message including the AK Context information is received from the paging controller according to the 16e standard, the controller 604 is a De-registration ID used as an identifier of the terminal of the idle mode in the m zone to the mixed base station and The LU_Rsp message including the MAC address of the terminal is transmitted.

Subsequently, when the LU_Req message including the Nonce_BS, Nonce_MS, MSID *, CMAC key, MS MAC address and paging information, ie, Paging Offset, Paging Group ID, Paging Cycle, and Paging Interval Length is received from the mixed base station, the controller ( 604 requests the AK context for the terminal by sending a Context_Req message to the authenticator according to the 16m standard. Subsequently, when a Context_Rsp message including AK-related information is received from the authenticator according to the 16m standard, the controller 604 assigns a De-registration ID to be actually used by an idle mode terminal in an m zone, and transmits an LU_Rsp message. Thereby transmitting the De-registration ID to the mixed base station. Then, when the controller 604 recognizes the completion of the location update through the LU_Cnf message received from the mixed base station, the controller 604 requests to delete the information of the terminal by sending an LU_Cnf message to the authenticator according to the 16e standard.

7 is a block diagram of an authenticator in a broadband wireless communication system according to an exemplary embodiment of the present invention.

Referring to FIG. 7, the authenticator includes a communicator 702 and a controller 704.

The communicator 702 provides an interface for the authenticator to communicate with other nodes in the network. The controller 704 controls the overall function of the authenticator. The authentication manager 706 in the controller 704 stores the authentication information of the terminals, and provides the authentication information at the request of another node. In particular, the controller 704 controls to perform zone switching through the location update of the idle mode terminal. The function of the controller 704 for the zone switching is as follows.

When the security record of the terminal is received by receiving a Relocation_Req message from the authenticator according to the 16e standard, and the paging controller change and the changer are notified of the change, the controller 704 relocates by transmitting a Relocation_Rsp (Relocation Response) message. The result of the (relocation) process is notified to the authenticator according to the 16e standard. Subsequently, when a Context_Req message including an MSID *, Nonce_BS, Nonce_MS, and CMAC key for requesting an AK context for the terminal is received from the paging controller according to the 16m standard, the controller 704 is the MSID *, the An AK is generated using the Nonce_BS, the Nonce_MS, and the CMAC key, and AK-related information is transmitted to another paging controller in the 16m standard.

At this time, the MSK for the terminal is required to generate the AK. The MSK must be provided by an authentication server. To this end, the controller 704 performs a procedure for requesting and receiving the MSK of the terminal to the authentication server, and the obtaining procedure of the MSK after receiving the Rolocation_Req message, or after receiving the Context_Req message. Is performed.

Meanwhile, in the detailed description of the present invention, specific embodiments have been described, but various modifications are possible without departing from the scope of the present invention. Therefore, the scope of the present invention should not be limited to the described embodiments, but should be determined not only by the scope of the following claims, but also by the equivalents of the claims.

1 is a view showing a schematic configuration of a broadband wireless communication system according to an embodiment of the present invention;

2A to 2C are diagrams illustrating a signal flow for indicating zone switching in a broadband wireless communication system according to a first embodiment of the present invention;

3A to 3C are diagrams illustrating a signal flow for indicating zone switching in a broadband wireless communication system according to a second embodiment of the present invention;

4 is a block diagram of a terminal in a broadband wireless communication system according to an embodiment of the present invention;

5 is a block diagram of a base station in a broadband wireless communication system according to an embodiment of the present invention;

6 is a block diagram of a paging controller in a broadband wireless communication system according to an embodiment of the present invention;

FIG. 7 is a block diagram illustrating an authenticator in a broadband wireless communication system according to an exemplary embodiment of the present invention.

Claims (8)

In a broadband wireless communication system supporting a plurality of communication standards, A user equipment that supports both the first and second standards, A base station accessible by the terminal and supporting both the first standard and the second standard; At least one control station connecting the base station with a core network; An authentication server responsible for authentication and charging of the terminal; The terminal enters an idle mode through the first standard and then moves from a zone for the first standard to a zone for the second standard through a location update in the idle mode. And perform zone switching. The method of claim 1, The at least one control station may include: a first paging controller managing paging according to the first standard, a second paging controller managing paging according to the second standard, and managing security information according to the first standard A system comprising a first authenticator and a second authenticator managing security information according to the second standard. The method of claim 2, The terminal transmits a ranging request message for location update to the base station, The base station transmits a location update request message to the second paging controller, The second paging controller requests the information on the terminal from the first paging controller, The first paging controller requests security-related information of the terminal from the first authenticator, The first authenticator provides the security related information of the terminal to the second authenticator. The method of claim 3, The first authenticator provides the authentication key of the terminal to the first paging controller, The first paging controller provides an authentication key of the terminal to the second paging controller, The second paging controller, to the base station transmits a location update response message including an identifier for distinguishing the terminal of the children mode in the zone for the second standard and the MAC address of the terminal, And the base station transmits a ranging response message including an indication of zone switching and an identifier for distinguishing a terminal of an idle mode from a zone for a second standard. The method of claim 4, wherein The terminal transmits a ranging request message to the base station, the ranging request message including an identifier of the first paging controller, an identifier of the second paging controller, and an identifier for identifying an idle mode terminal in the zone for the second standard. , The base station transmits a location update request message including at least one of Nonce_BS, Nonce_MS, MSID *, CMAC key, MS MAC address, Paging Offset, Paging Group ID, Paging Cycle, and Paging Interval Length to the second paging controller. , The second paging controller requests the authentication key of the terminal by transmitting a Context_Req message including at least one of MSID *, Nonce_BS, Nonce_MS, and CMAC of the terminal to the second authenticator. The second authenticator generates an authentication key of the terminal using at least one of the MSID *, Nonce_BS, Nonce_MS, and CMAC of the terminal and the MSK of the terminal, and then uses the second paging controller to generate the authentication key of the terminal. Offering, And the second paging controller transmits a location update response message including a de-registration ID to the terminal. The method of claim 5, The second authenticator, after receiving the security related information of the terminal from the first authenticator, characterized in that for requesting and receiving the MSK of the terminal to the authentication server. The method of claim 5, The second authenticator, after receiving a request for the authentication key of the terminal from the second paging controller, characterized in that for requesting and receiving the MSK of the terminal to the authentication server. The method according to any one of claims 1 to 7, The first standard is IEEE (Institute of Electrical and Electronics Engineers) 802.16e, The second standard is IEEE 802.16m system.

Images